Uploading the same orig.tar.gz (matching checksums) is fine and workarounds this bug.
I also think that since we start publishing sources immediately after they are processed this bug became much less important. I mean, we have to draw a line between 'files' that are known and the ones that are not, and stuff in ACCEPTED is definitely good (as it already is), but NEW (specially) and UNAPPROVED, in principle are not.
Philipp,
Uploading the same orig.tar.gz (matching checksums) is fine and workarounds this bug.
I also think that since we start publishing sources immediately after they are processed this bug became much less important. I mean, we have to draw a line between 'files' that are known and the ones that are not, and stuff in ACCEPTED is definitely good (as it already is), but NEW (specially) and UNAPPROVED, in principle are not.